From a38c39424f29bbdfe1493061da05326f9d05d4a0 Mon Sep 17 00:00:00 2001
From: lassulus <lassulus@lassul.us>
Date: Mon, 2 Jan 2023 18:48:12 +0100
Subject: [PATCH] l sync-containers3: allow ctr0 in FORWARD
---
lass/3modules/sync-containers3.nix | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/lass/3modules/sync-containers3.nix b/lass/3modules/sync-containers3.nix
index 053175565..02ba0a5ff 100644
--- a/lass/3modules/sync-containers3.nix
+++ b/lass/3modules/sync-containers3.nix
@@ -296,6 +296,10 @@ in {
krebs.iptables.tables.filter.INPUT.rules = [
{ predicate = "-i ctr0"; target = "ACCEPT"; }
];
+ krebs.iptables.tables.filter.FORWARD.rules = [
+ { predicate = "-i ctr0"; target = "ACCEPT"; }
+ { predicate = "-o ctr0"; target = "ACCEPT"; }
+ ];
})
(lib.mkIf cfg.inContainer.enable {
users.groups.container_sync = {};